122 Commits (ace2def49dce2971ce37db44d94faac0e2289bb7)

Author	SHA1	Message	Date
XingLu Wang	9d50db4c44	doc: Fix typo (#3185)	3 years ago
Jeff Mitchell	413ec67ace	Fix description of port to not be optional	3 years ago
Dan Heath	6db6cc18e2	docs: Credential management documentation (#3147) ... * docs: Create credential management documentation * docs: Copy edits * docs: Update graphics * docs: Additional copy edits * docs: Fix typos * docs: Reduce size of graphics * docs: Fix pixel density in brokering graphic * docs: Increase size of graphics * docs: Fix pixel density in brokering graphic * docs: Fix issue with brokering image size * docs: Adjust cred brokering image width * docs: Adjust width of brokering graphic * docs: Specify width for gifs * docs: Undo width settings on gifs * docs: Test brokering gif at 75% * doc: Test resized images in preview deployment * docs: Resize gifs smaller * docs: Resize gifs a bit larger * doc: Cleanup extra graphics, test zoomable link * docs: Test gif loop with original * docs: Update gif with loop, fix legacy link * docs: Clean up file names, add updated graphics * docs: Increase size of terminal gif * docs: Update terminal graphic * docs: Update with larger terminal graphic * docs: Move large graphics to DatoCMS	3 years ago
Dan Heath	d1e30af9ce	docs: Add links to new tutorials (#3106) ... * docs: Add links to new tutorials * docs: Make heading plural * docs: Small rewrite to force a commit	3 years ago
Jim	86192f75eb	feature (auth/ldap): add LDAP auth method along with associated accounts and managed groups (#2912) ... * feature (auth): required schema changes for auth ldap method (#2669) chore (auth/ldap): move schema changes to next avail migration number * feature (auth/ldap): define AuthMethod and all its value objects (#2703) * feature (auth/ldap): storage protos * feature (auth/ldap): define AuthMethod and all its value objects * feature (auth/ldap): add repo and reading an auth method (#2718) * feature (auth/ldap): add Repository.CreateAuthMethod(...) and Repository.DeleteAuthMethod(...) (#2724) * feature (auth/ldap): add Repository.UpdateAuthMethod(...) (#2739) * feature (auth/ldap): add Account * feature (auth/ldap): add AuthMethod.EnableGroups * fix (auth/ldap): refactor AuthMethod.oplog to enforce proper constraints * feature (auth/ldap): add Account repo functions * refactor (auth/ldap): remove entry attributes from account Realized the entry attributes could have absolutely anything in them (including binary data) and since we absolutely don't have to have them there's just no reason to take on the risk. * feature (auth/ldap): add AuthMethod.UseTokenGroups * feature (auth/ldap): add Authenticate(...) * refactor (auth/ldap): ensure options take a context as the 1st parameter * feature (auth/ldap): add Account attribute maps * chore (auth/ldap): make fmt deltas * feature (auth/ldap): add managed groups (#2760) * tests (auth/ldap): add missing unit test to Repository.DeleteAccount(...) Add bits to test the delete operation when you're not able to generate oplog metadata * feature (auth/ldap): add managed groups fixup! feature (auth/ldap): add managed groups (#2760) * feature (auth/ldap): service proto definition (#2761) * feature (handlers/authmethods): add handlers for ldap auth method operations (#2794) * feature (auth/ldap): add Account attribute maps * chore (auth/ldap): update cap/ldap to latest version * feature (auth/ldap): add ldap api generation definitions * feature (authmethods): add ldap repo NewService(...) * feature (authmethods/ldap): add proper mask_mapping to protobufs * feature (authmethods): add support to get an ldap auth method * refactor (auth/ldap): export TestGenerateCA(...) * feature (authmethods): add support to create an ldap auth method * feature (authmethods): add support to delete an ldap auth method * feature (authmethods): add support to list ldap auth methods * refactor (auth/ldap): make urls optional for NewAuthMethod(...) * refactor (auth/ldap): export ldap.TestInvalidPem * chore: make fmt changes * fix (auth/ldap): properly handle group search config Add constraints and tests to ensure when an ldap AuthMethod.EnableGroups is true, and UseTokenGroups is false; that there's a GroupDn configured for finding a user's associated groups * feature (authmethods): add support to update an ldap auth methods * chore (db/ldap): tmp mv migrations so there's no conflict with ongoing work * feature (verifier): add ldap auth method to verifier bits * fix (controller): prevent panic when controller stops when there's no listener * feature (authmethods): add support to authenticate via ldap auth methods * chore (migrations): fix whitespace in stmt * chore: fmt fixup * tests (auth/ldap): invalid err msg * feature (cli/authmethods): add support for ldap auth-methods CRUD and authenticate (#2810) * feature (authmethods): add CLI support for ldap auth methods CRUD * tests (api/auth): ldap auth method classification tests * feature (authmethods): add CLI support for ldap auth authenticate * feature (auth/ldap): set request timeouts for ldap server connections * feature (handlers/authmethods): handle u_anon listing properly. * feature (account/handers): ldap account and managed group CRUDL APIs (#2852) * feature (auth/ldap) add repository Listing of ManagedGroupMemberAccount * feature (controller/handlers): add ldapRepoFn to accounts service * feature (auth/ldap) register ldap managed group subtype * feature (account/handlers): ldap account CRUDL APIs * feature (controller/handlers): add ldapRepo to managed groups service * feature (account/handlers): ldap managed group CRUDL APIs * docs (domain): add LDAP accounts, auth-methods and managed groups (#2857) * feature (ldap/cli) add ldap accounts and managed groups CRUDL commands (#2856) * fix (handlers/authmethods): fix ldap authorized actions (#2892) * feature (cli/ldap/authenticate): use primary auth method if none is provided (#2890) * fix (auth/ldap): support setting the state attribute * feature (cli/ldap/authenticate): use primary auth method if none is provided * feature (wh/ldap) add tests for new ldap auth method and accounts (#2919) * refactor (migrations/ldap): mv to correct directory * chore: add copyright headers * fix (api/authmethods/ldap): renumber new LdapAuthMethodAttributes field * fix (auth/ldap): allow the auth method state to be updated (#2951) * chore: update sdk and api versions for llb - this is tmp until merging * tests (managed groups): add required errContains for new test	3 years ago
XingLu Wang	ad5c6d836e	Update service-discovery.mdx (#2995)	3 years ago
Dan Heath	d7049e4e79	docs: Update main branch with 0.12.0 revisions (#2975) ... * docs: Add HCP only to heading * docs: Add worker requirements * docs: Fix heading format and hierarchy * docs: Fix headings format * docs: Update feature name using "sessions" * docs: Fix heading hierarchy * docs: Fix headings format * docs: Fix spacing in title	3 years ago
Dan Heath	0a28dab9d0	docs: Add JSON credentials blob example (#2915)	3 years ago
Dan Heath	51f2876265	docs: Update credentials docs for 0.12.0 (#2871) ... * docs: Update credentials docs for 0.12.0 * Update website/content/docs/concepts/domain-model/credential-libraries.mdx Co-authored-by: Timothy Messier <tim.messier@gmail.com> * docs: updates from review * docs: fix capitalizationi --------- Co-authored-by: Timothy Messier <tim.messier@gmail.com>	3 years ago
Dan Heath	d41ef25a27	docs: Update multi-hop docs (#2806) ... * docs: Update multi-hop docs * Apply batch of suggestions from code review Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com> Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> * docs: Fix spelling Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com> Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>	3 years ago
Ashlee M Boyer	e6be6431b2	docs: Migrate link formats (#2777) ... * Adding docs-content-check-legacy-links-format workflow * Adding test-link-rewrites workflow * Migrating links to new format	3 years ago
Ashlee M Boyer	a437bdae0a	[docs] Adjusting more links for rewrite project (#2791) ... * Removing in query param from tutorial link * Updating link to renamed tutorial * Fixing broken link syntax	3 years ago
Irena Rindos	12415990ac	Add default port and address to target doc (#2775) ... * add default port and address to target doc Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Irena Rindos	5ac590f305	Update documentation to add ingress and egress filters (#2771) ... * Update documentation to add ingress and egress filters	3 years ago
Hugo Vieira	1f9063e042	docs(target): Introduce direct address targets and explain tradeoffs	3 years ago
Johan Brandhorst-Satzkorn	240278cbf1	fix(docs): Use "root" to reference the root key (#2700) ... The "root" identifier is how we identify the root key in configuration, so it is the phrase we should use in this documentation.	3 years ago
Dan Heath	70a1302cd9	Update Vault credential library templating section (#2679) ... * Update Vault credential library templating section * Add request body to intro * Update website/content/docs/concepts/domain-model/credential-libraries.mdx Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com> * Minor rewrite Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	3 years ago
Johan Brandhorst-Satzkorn	6d25b35b4e	Add KMS rotation/destruction feature to the changelog and docs (#2600) ... * Add initial changelog entry * feat(docs): Add initial stab at docs for KMS rotation/destruction * fixup! Add initial changelog entry * Review comments	3 years ago
Dan Heath	c506107127	Document vault credential library templating (#2635) ... * Document credential library injection * Add caveat about versions < 0.11.1, remove link	3 years ago
Johan Brandhorst-Satzkorn	df02501dcc	Create new "previous-root" key purpose for root key migrations (#2639) (#2648) ... * Update go-kms-wrapping dependency * Apply changes suggested by Jeff * Fix listener test * Add note about config fix to CHANGELOG * Review comments Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Dan Heath	4509981e5b	Fix pull-down placement (#2610)	3 years ago
Jeff Mitchell	cede1aec93	Add initial templating support to Vault credential libraries (#2569) (#2575) ... Add initial templating support to Vault credential libraries This adds support for templating various account and user values into Vault dynamic credential library POST bodies and GET/POST paths. It also unifies how parameters are used in grants, with backwards compatibility.	4 years ago
stephan242	220456d092	Remove duplicate sentence (#2560)	4 years ago
Irena Rindos	e588623ebd	docs(vault): add Vault worker filter documentation (#2404) ... * docs(vault): add Vault worker filter documentation	4 years ago
Jeff Mitchell	53b5e532d5	Remove deprecated methods/fields on targets (#2393)	4 years ago
Yoko Hyakuna	fa619b0910	Address reported bugs (#2449)	4 years ago
Jeff Mitchell	01fb949d0b	Add controller-led worker auth flow (#2413) ... This adds an action to the API that allows pulling out an activation token that can be given to a worker in its config (directly or via env or file). The worker can pass this along with its normal request in place of its normal nonce and the server will automatically accept it. Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>	4 years ago
Jeff Mitchell	30ede3b137	Fix various website issues (#2344) ... I found some invalid links and some missing KMS information; this fixes those.	4 years ago
Loann Le	3fb09dd247	Boundary documentation: updated domain model page (#2259) ... * updated domain model * updated image ext * resized images * updated content * updated images * resizing images * fixed one image * modified text * removed image	4 years ago
Loann Le	24cf580045	Boundary documentation: modified Boundary's overview page (#2264) ... * modified overview page * updated text and image * fixed spelling errors * Update website/content/docs/what-is-boundary.mdx Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com> * Update website/content/docs/what-is-boundary.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/what-is-boundary.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/what-is-boundary.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/what-is-boundary.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/what-is-boundary.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * cleaned up content * Update website/content/docs/what-is-boundary.mdx Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com> * incorporate feedback * updated image * updated background color * modified font * Update website/content/docs/what-is-boundary.mdx Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com> Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>	4 years ago
Louis Ruch	5c80942453	docs(credentials): Update website domain docs (#2287)	4 years ago
Loann Le	d5633952db	Boundary documentation: content cleanup in prep for devdot migration (#2249) ... * cleaning up docs * Update website/content/docs/concepts/domain-model/groups.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/managed-groups.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/roles.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/scopes.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/sessions.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/configuration/worker/pki-worker.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/getting-started/deploy-and-login.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	4 years ago
Jeff Malnick	1f66685864	feat: set default connection limit to unlimited (-1) instead of 1 (#2234) ... This avoids the confusion behavior of a session terminating as soon as a single connection using that session is closed.	4 years ago
Jeff Mitchell	79440c5d82	Add worker resource to perms table (#2241)	4 years ago
Robin Beck	0ff4be119e	updates learn links (#2230)	4 years ago
Robin Beck	c05fa66096	Hashiconf docs changes (#2178) ... Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com> Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com> Co-authored-by: irenarindos <irena.rindos@gmail.com> Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> Co-authored-by: Louis Ruch <louisruch@gmail.com> Co-authored-by: XingLu Wang <xinglu.wang@hashicorp.com> Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>	4 years ago
Jeff Mitchell	7c139d28b2	Have hclog payloads use `json` tags (#2171) ... * Have hclog payloads use `json` tags Previously a global setting for the `structs` lib was causing the `json` tag to be used, but this could have side effects from other packages, or could be affected by other packages' behavior. This behavior was removed earlier but it means this format call no longer uses `json` tags; this behavior reverts it. It also normalizes using mapstructure in a few other places. * Update some tests * Fix incorrect op const * Fix more tests * refactor (events): tell filter to use json tags (fix related tests) Explicitly tell the filter to use the "json" tags so we don't have to re-tag everything with a mapstructure tag via bexpr.WithTagName("json") Update docs Co-authored-by: Jim <jlambert@hashicorp.com>	4 years ago
Jeff Mitchell	d6362f9e5e	Restrict anonymous user capabilities (#2156)	4 years ago
PPacent	ce7292d9c8	Docs: Adding service discovery concept page (#1886) ... * Adding service discovery concept page	4 years ago
irenarindos	32dd594029	docs(connections): Update domain model for session connections	4 years ago
Irena Rindos	bc6689fb16	docs(permissions): break permissions into sections (#1893) ... * docs(permissions): break permissions into sections * fixup! docs(permissions): break permissions into sections	4 years ago
Irena Rindos	718e746480	docs(targets): remove default port option (#1883)	4 years ago
Hugo Vieira	1576af70cc	feat(config): Add env and file support to Worker Tags ... This feature allows the user to set the `tags` field to a string that points to either an environment variable or file. We then dynamically pull out the value and parse it into the config. This can also be done at the keys level, where you set your keys directly in Boundary's config file, but point the values to env/file.	4 years ago
Todd	1c36b1e4d7	Add plugin details to host catalog, host set, and host domain model pages (#1715) ... * Add plugin information to host catalogs, host sets, and hosts.	4 years ago
Jeff Mitchell	7174a91f32	Update data-encryption documentation to clarify what is encrypted (#1722)	4 years ago
Jeff Mitchell	1782f6a4e4	Enhance worker connection security (#1641) ... This stores worker connection nonces within the database to ensure uniqueness of connections. Prior the connection required any attacker to be able to decrypt the incoming encrypted authentication message in order to replay (and if the attacker has access to the KMS you have bigger problems), but with this change even if an attacker does have access to the KMS key, they cannot reuse the same message. (If they're able to encrypt against the KMS key, they can still act as a worker with a new message, so this only really helps if they only have decryption capabilities.)	5 years ago
Jim	b3d8b50307	Sink documentation (#1449)	5 years ago
Todd Knight	39cc245966	Make gen after make tools. Includes make fmt of existing non generated files. (#1438)	5 years ago
Michael Gaffney	28f48df026	Add documentation for credentials to website (#1356)	5 years ago
Robin Beck	e69ca4f0cb	fixed roles and accounts link references (#1323)	5 years ago